CVE-2013-6712 in PHP
Summary
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
Reservation
11/08/2013
Disclosure
11/27/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11339 | PHP OBJECT parse_iso_intervals.c DateInterval memory corruption | 119 | Not defined | Official fix | CVE-2013-6712 |